Cloud Armor

Web application firewall and API protection delivered on Akamai's edge, combining adaptive WAF rules, API discovery, bot visibility and DDoS mitigation for web apps and APIs

Network-layer DDoS protection that routes customer traffic through Akamai scrubbing centres, on demand via BGP or always on, to defend data centres and internet-facing infrastructure

Managed WAF protecting web apps from OWASP Top 10 attacks, bot traffic, API abuse, and data scraping, with global and China regional deployment, custom rule engine, and unified consoles across Anti-DDoS and Security Center

DDoS mitigation family covering free Anti-DDoS Origin basic protection, Anti-DDoS Origin for cloud assets and Anti-DDoS Proxy (including outside mainland China) for scrubbing volumetric and application-layer attacks

Web application firewall that protects against common exploits with managed rule groups, custom rules, rate-based rules, Bot Control, and CAPTCHA challenges

Managed DDoS protection service with always-on Standard tier for CloudFront and Route 53 edge, and Advanced tier adding 24/7 DDoS Response Team access, cost protection, and enhanced Layer 7 detection

Layer 7 load balancer with integrated web application firewall, SSL termination, URL-based routing, cookie-based session affinity, and autoscaling based on traffic

Global application delivery network and CDN with anycast acceleration, caching, rules engine, WAF, bot protection and Private Link origins, in Standard and Premium tiers. Front Door (classic) is closed to new resources and retires 31 March 2027.

Managed Distributed Denial-of-Service protection for Azure resources with always-on traffic monitoring, adaptive real-time tuning, cost-guarantee protection against scale-out attacks, and integration with Azure Monitor for attack analytics and telemetry

Layer 3/4 volumetric DDoS mitigation powered by Cloudflare that flags excessive inbound traffic and blocks its sources. The Basic tier is included free with all accounts.

L3 DDoS scrubbing and IP transit for enterprise data centres — BGP advertises customer prefixes from Cloudflare's edge, clean traffic flows back via GRE / IPsec / private peering. Sub-3-second time-to-mitigation with no rerouting on the customer side.

L4 TCP / UDP reverse proxy through Cloudflare's edge for any protocol — SSH, RDP, game servers, FTP, MQTT, custom binary. DDoS protection and edge acceleration applied to non-HTTP traffic that the CDN proxy can't see.

L7 web application firewall protecting against OWASP Top 10 risks with Cloudflare-managed rule sets, custom expression-based rules, exposed-credentials detection, rate-limiting integration, and machine-learning attack-score signals tuned across the global traffic graph

Automatic, unmetered DDoS detection and mitigation at layers 3/4 and 7 on every Cloudflare plan, including Free, with managed rulesets that can be tuned per zone or account.

Always-on protection against volumetric DDoS attacks, with automatic real-time detection and mitigation upstream of customer infrastructure and up to 1 Tb/s absorption capacity; included with Internet access via Private Backbone

Network DDoS protection with a free Basic mode (ACL filtering and null-routing for Gcore-hosted resources) and paid Advanced always-on scrubbing against L3/L4/L7 attacks, onboarded via GRE tunnels with sub-second detection

Web application and API protection with OWASP rule sets, bot management, API schema enforcement, and rate limiting — delivered at the CDN edge with a single configuration surface

Managed web application firewall with OWASP Top 10 rule sets, bot management, anti-crawler, CC (challenge-collapsar) attack mitigation, custom rule engine, and regional deployment with integrated DDoS protection

Edge delivery and security bundle powered by Cloudflare, offering DNS, global load balancing, WAF, DDoS protection, CDN, rate limiting, and Page Rules through a single IBM Cloud-native control plane

Always-on volumetric and protocol-level DDoS mitigation at the network edge, with automatic detection and scrubbing for L3/L4 attacks targeting Compute Engine, Load Balancer, and Public IP resources

Layer-7 protection against OWASP Top 10 attacks (SQLi, XSS, RCE), bot traffic, and DDoS at the application layer. Edge-deployed for global protection or regional for backend-fronted apps.

L7 web application firewall protecting against OWASP Top 10 risks — SQL injection, XSS, command injection — with managed rule sets, custom rules, IP allow/block lists, and bot-detection heuristics tuned for OTC-hosted apps

Managed WAF with bot mitigation, IP / geo blocking, custom rules, and per-route challenges — runs on the edge before any function executes